Is Meshtastic Encrypted? How Private Are Meshtastic Messages?

Meshtastic messages are encrypted, but how private they are depends on the channel. The default public channel uses a key every radio ships with, so anyone with Meshtastic can read it. A private channel with its own randomly generated key keeps message content limited to people you share that key with. Some information, like who is sending, still travels openly.

How does encryption work on the default channel?

Every new Meshtastic radio starts on the same default primary channel with the same default key. That's what lets strangers' radios find each other and form a public mesh, which is useful. It also means the encryption on that channel protects nothing in practice, because the key is effectively public. Treat anything you send there like a conversation in a crowded room where everyone carries the same decoder.

The default channel is fine for testing range, saying hello to local users and learning how the mesh behaves. It isn't the place for your address, your family's plans or anything you'd mind a neighbor reading.

How private is a private channel?

When you create your own channel in the app, Meshtastic generates a random key for it. Only radios that have that key can read the messages on that channel. You share it by QR code or link from the app, ideally in person, so the key never travels anywhere you don't control. Other radios on the mesh still relay your private channel's traffic, but they pass it along without being able to read it.

The weak point is the key itself. Anyone who gets a copy of the QR code or link can read the channel, so don't post it, screenshot it into a group chat or leave it printed where guests can see it. If you think a key has leaked, create a new one and reshare it with your group.

Are direct messages private?

On current Meshtastic firmware, a direct message to a specific radio is encrypted using that radio's public key, so only the recipient can read it, even if other people share your channel. Older firmware handled direct messages with the channel key instead, so keeping every radio in your group on current firmware matters here.

What can other people see even when messages are encrypted?

Encryption covers what you say. It doesn't hide everything around it. Each packet carries routing information, such as the sending and receiving radio's ID, in the clear so other radios know how to relay it. Anyone listening can see that your radio is active and roughly how often it talks.

Radios also announce themselves. By default, your radio periodically broadcasts its long name and short name, and if position sharing is on, its location. When those broadcasts go out on the public default channel, anyone on the mesh can see a name and a dot on a map. A node named after your family, sitting on your house, tells strangers a lot. Some radios also connect to the internet through a feature called MQTT, which can carry public channel traffic and positions onto online maps beyond your local area.

A few habits reduce this.

• Give radios neutral names that don't include your last name or street
• Turn off position sharing or lower its precision on the public channel
• Keep family traffic on a private channel and share the key in person
• Remember that the radio signal itself shows a transmitter is nearby

Our Meshtastic Beginner Course walks through these privacy settings, along with firmware updates, in more detail.

How do you know a message really came from your family?

Encryption keeps outsiders from reading a private channel, but on the public channel anyone can name their radio anything. If a message asks someone to act, such as leaving the house or meeting somewhere new, it's worth verifying who sent it. Our authentication table guide shows a simple way to do that over any radio.

Common questions

Can a ham radio operator use Meshtastic encryption?

Licensed amateur operators running Meshtastic under their ham license can't use encryption, because amateur rules prohibit obscuring message content. Meshtastic has a licensed mode that turns encryption off for that reason. Our article on whether you need a license for Meshtastic covers when that applies.

Can someone read my private channel if they relay my messages?

No. Radios without your channel key relay the encrypted packet without being able to read its contents. They can see routing details like the sending radio's ID, but not what you wrote.

Should I stop using the public channel?

Not necessarily. It's useful for meeting local users and checking coverage. Just keep anything personal on a private channel and set your radio's name and position sharing with the public channel in mind.

Is Meshtastic secure enough for anything sensitive?

It's reasonable for keeping family logistics away from casual listeners. It isn't a substitute for tools built and audited for high-security use, so don't put anything on any radio that would cause real harm if it got out.

To get your family onto its own private channel step by step, start with the Meshtastic Starter Guide.